CVE-1999-1554 — Irix vulnerability

4 documents4 sources
Severity
2.1LOWNVD
EPSS
1.6%
top 17.98%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
SGI Irix
Timeline
PublishedOct 31
Latest updateApr 16

Description

/usr/sbin/Mail on SGI IRIX 3.3 and 3.3.1 does not properly set the group ID to the group ID of the user who started Mail, which allows local users to read the mail of other users.

CVSS vector

AV:L/AC:L/C:P/I:N/A:NExploitability: 3.9 | Impact: 2.9

Affected Packages1 packages

▶NVDsgi/irix3.3, 3.3.1+1

Patches

Patch: www.cert.org ↗Patch: www.securityfocus.com ↗Patch: www.cert.org ↗

🔴Vulnerability Details

3
VulDB
SGI IRIX 3.3/3.3.1 usr/sbin/mail privileges management (XFDB-3164 / BID-13)↗2026-04-16
▶
GHSA
GHSA-pvqr-8r46-rrwv: /usr/sbin/Mail on SGI IRIX 3↗2022-04-30
▶
CVEList
CVE-1999-1554: /usr/sbin/Mail on SGI IRIX 3↗2001-09-12
▶
CVE-1999-1554 — SGI Irix vulnerability | cvebase